The code of the plugin looks fine to me.
I did empty /root/handshakes before starting over and using aircrackonly plugin. There are not old pcaps lingering in the folder.
aircrackonly properly identifies pcaps with a handshake and with PMKID and handhakes without the needed handshake messages.
Unfortunately it seems that aircrackonly is not called for every pcap that is collected. I find a lot of pcaps with no content or containing only message 1 of the handshake. For those pcaps there is NO log message from aircrackonly in the log file.
Maybe the call hook mechanism is not working properly?
The code of the plugin looks fine to me. I did empty /root/handshakes before starting over and using aircrackonly plugin. There are not old pcaps lingering in the folder. aircrackonly properly identifies pcaps with a handshake and with PMKID and handhakes without the needed handshake messages. Unfortunately it seems that aircrackonly is not called for every pcap that is collected. I find a lot of pcaps with no content or containing only message 1 of the handshake. For those pcaps there is NO log message from aircrackonly in the log file.
Maybe the call hook mechanism is not working properly?